Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
ccmsetup.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ccmsetup.exe
Resource
win10v2004-20240802-en
Target
ccmsetup.exe
Size
6.5MB
MD5
c16b13d6c8762c707720be0fa08692cf
SHA1
1c9adf109da91cb23690796d68d4474423849af7
SHA256
26b945aeeab63ad9fcfb24b6e54391a943892b26900d3c30b35ef49ff5f24e2a
SHA512
9b7d95871112c848bbcdde5878823957f809a049b12e7120a2b521b348cc2c98aaee0d6793e1cc79454610cbacd7a237a3700d6299145edef04065bbc6a71639
SSDEEP
49152:fptcd+xirMx2wXPVJsTa3AIqV0hhEmTcybUdvlOlg9E/2L5U8En6SaHpnBARDHnY:fDcdLrMx2wXPVJsTaQIQohEmTS
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_NET_RUN_FROM_SWAP
K:\dbs\sh\cmgm\1026_005344\cmd\1f\out\retail-i386\ccmsetup\ccmsetup.pdb
VirtualFree
DecodePointer
GetLocalTime
GetComputerNameExW
GetDiskFreeSpaceW
VirtualAlloc
FileTimeToSystemTime
TerminateProcess
OpenProcess
GetProcessTimes
GetComputerNameW
SystemTimeToFileTime
IsDebuggerPresent
OutputDebugStringW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetSystemTime
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
InitializeSListHead
RtlUnwind
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
ExitProcess
GetModuleHandleExW
GetStdHandle
GetCurrentThread
HeapFree
HeapAlloc
HeapSize
HeapReAlloc
GetFileType
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetProcessHeap
SetConsoleCtrlHandler
SetStdHandle
GetStringTypeW
SetFilePointerEx
FlushFileBuffers
GetConsoleCP
GetConsoleMode
ReadConsoleW
WriteConsoleW
lstrcmpW
GlobalLock
GlobalUnlock
FormatMessageW
GetThreadTimes
GetTimeZoneInformation
SetErrorMode
GetFileInformationByHandle
SystemTimeToTzSpecificLocalTime
SetFilePointer
LockFileEx
SetEndOfFile
UnlockFileEx
FileTimeToLocalFileTime
GetVolumeInformationW
GetFileAttributesExW
DeviceIoControl
GetWindowsDirectoryW
VerSetConditionMask
VerifyVersionInfoW
GetVersionExW
GetSystemInfo
GetCurrentDirectoryW
LocalAlloc
GlobalFree
DuplicateHandle
WTSGetActiveConsoleSessionId
HeapCreate
HeapQueryInformation
HeapSetInformation
HeapDestroy
CreateSemaphoreW
ReleaseSemaphore
FreeConsole
AllocConsole
GetConsoleWindow
PeekNamedPipe
GetVersion
CreatePipe
CreateJobObjectW
SetInformationJobObject
AssignProcessToJobObject
WaitForMultipleObjects
TerminateJobObject
OpenEventW
CreateFileMappingW
CompareFileTime
GetSystemDefaultLCID
GetExitCodeThread
CreateThread
SleepEx
OpenMutexW
VirtualProtect
VirtualQuery
LoadLibraryExA
SetLastError
LoadLibraryW
GetDiskFreeSpaceExW
GetSystemDefaultUILanguage
ExpandEnvironmentStringsW
GetExitCodeProcess
GetSystemDirectoryW
GetSystemWow64DirectoryW
GetFullPathNameW
FindClose
GetCurrentProcess
WritePrivateProfileStringW
MoveFileExW
GetTempFileNameW
GetCurrentProcessId
GetEnvironmentVariableW
GetFileSize
GetSystemPowerStatus
GetTickCount
CreateDirectoryW
GetPrivateProfileIntW
RemoveDirectoryW
CopyFileW
CancelWaitableTimer
SetWaitableTimer
CreateWaitableTimerW
CopyFileExW
SetFileAttributesW
GetPrivateProfileSectionW
GetPrivateProfileSectionNamesW
WriteFile
ReadFile
GetFileSizeEx
CreateFileW
GetFileAttributesW
MapViewOfFile
LocalFree
CreateProcessW
Sleep
ResetEvent
GetCommandLineW
SetEvent
ReleaseMutex
WaitForSingleObject
lstrlenW
FindNextFileW
DeleteFileW
FindFirstFileW
UnmapViewOfFile
CreateEventW
CreateMutexW
InitializeCriticalSection
CloseHandle
DeleteCriticalSection
InitializeCriticalSectionEx
GetModuleFileNameW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
GetLastError
EnterCriticalSection
RaiseException
LeaveCriticalSection
lstrcmpiW
GetModuleHandleW
GetProcAddress
FreeLibrary
GetCurrentThreadId
CharUpperBuffW
MessageBoxW
GetDesktopWindow
CharNextA
ShowWindow
MsgWaitForMultipleObjects
PeekMessageW
DispatchMessageW
LoadStringW
DefWindowProcW
DestroyWindow
CreateWindowExW
RegisterClassW
LoadCursorW
GetSystemMetrics
CharLowerBuffW
CharNextW
ConvertStringSecurityDescriptorToSecurityDescriptorW
CryptDestroyKey
CryptAcquireContextW
CryptVerifySignatureW
CryptCreateHash
CryptHashData
CryptSetHashParam
CryptDestroyHash
CryptImportKey
CryptSignHashW
CryptGetHashParam
CryptReleaseContext
EventWrite
EventRegister
EventUnregister
LsaClose
LsaFreeMemory
GetWindowsAccountDomainSid
LsaQueryInformationPolicy
LsaNtStatusToWinError
LsaOpenPolicy
QueryServiceConfigW
EnumDependentServicesW
RegQueryValueExW
QueryServiceStatusEx
EqualSid
GetTokenInformation
ConvertSidToStringSidW
ConvertStringSidToSidW
CreateProcessAsUserW
DuplicateTokenEx
IsTextUnicode
RevertToSelf
ImpersonateLoggedOnUser
OpenThreadToken
InitializeSecurityDescriptor
GetSecurityDescriptorDacl
SetSecurityDescriptorDacl
GetSecurityDescriptorSacl
InitializeAcl
GetAclInformation
GetAce
AddAce
IsValidAcl
SetSecurityDescriptorSacl
GetSecurityDescriptorOwner
StartServiceW
SetSecurityDescriptorOwner
GetSecurityDescriptorGroup
GetLengthSid
CopySid
SetSecurityDescriptorGroup
GetSecurityDescriptorControl
SetSecurityDescriptorControl
IsValidSecurityDescriptor
ImpersonateSelf
CloseServiceHandle
InitiateSystemShutdownExW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegisterServiceCtrlHandlerExW
RegSetKeySecurity
ChangeServiceConfigW
ChangeServiceConfig2W
SetNamedSecurityInfoW
DeleteService
ControlService
QueryServiceStatus
SetServiceStatus
RegDeleteKeyW
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
GetUserNameW
StartServiceCtrlDispatcherW
OpenSCManagerW
CreateServiceW
OpenServiceW
CommandLineToArgvW
CoTaskMemFree
CoCreateInstance
CoInitializeEx
CoSetProxyBlanket
CoUninitialize
CLSIDFromString
CoTaskMemAlloc
CoTaskMemRealloc
CLSIDFromProgID
CoCreateGuid
CreateStreamOnHGlobal
GetHGlobalFromStream
StringFromGUID2
CoQueryProxyBlanket
CoCreateFreeThreadedMarshaler
CoWaitForMultipleHandles
VariantInit
VarBstrCmp
SysStringByteLen
SysAllocStringByteLen
VariantChangeType
VariantTimeToSystemTime
SafeArrayDestroy
SafeArrayCreateVectorEx
SafeArrayGetVartype
SafeArrayGetElement
SafeArrayPutElement
SysAllocString
SysAllocStringLen
VariantCopy
VariantClear
SysFreeString
SysStringLen
VarUI4FromStr
CertCreateCertificateChainEngine
CertDuplicateCertificateContext
CertGetCertificateContextProperty
CertFreeCertificateContext
CertOpenStore
CertFindCertificateInStore
CertAddEncodedCertificateToStore
CertCloseStore
CertVerifyCertificateChainPolicy
CertCompareCertificateName
CertStrToNameW
CertGetNameStringW
CertFreeCertificateChain
CryptVerifyCertificateSignatureEx
CertNameToStrW
CertEnumCertificatesInStore
CertAddCertificateContextToStore
CertVerifyTimeValidity
CertGetValidUsages
CertGetCertificateChain
CertFindChainInStore
CryptDecodeObjectEx
CryptDecodeObject
CryptAcquireCertificatePrivateKey
CertCreateCertificateContext
CertControlStore
CertFreeCertificateChainEngine
CryptProtectData
CryptUnprotectData
CertFindExtension
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
WinHttpWriteData
WinHttpQueryDataAvailable
WinHttpReceiveResponse
WinHttpCrackUrl
WinHttpConnect
WinHttpQueryOption
WinHttpSetStatusCallback
WinHttpSetCredentials
WinHttpSendRequest
WinHttpCloseHandle
WinHttpSetOption
WinHttpOpenRequest
WinHttpOpen
WinHttpQueryHeaders
WinHttpReadData
RpcStringFreeW
UuidCreate
UuidToStringW
EnumProcessModules
GetModuleFileNameExW
SetupIterateCabinetW
PathIsUNCServerShareW
PathFindFileNameW
SHDeleteKeyW
AssocQueryStringW
PathCombineW
PathSkipRootW
PathFindExtensionW
PathCanonicalizeW
PathAddBackslashW
PathAppendW
PathIsRelativeW
PathIsNetworkPathW
PathStripToRootW
WTSQueryUserToken
WTSFreeMemory
WTSQuerySessionInformationW
WTSEnumerateSessionsW
GetAdaptersAddresses
GetAdaptersInfo
DsGetSiteNameW
NetApiBufferFree
ord4
ord9
ord5
ord6
inet_ntoa
htonl
inet_addr
WTHelperProvDataFromStateData
WTHelperGetProvSignerFromChain
WinVerifyTrust
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ